1a = "ssh" 2b = "ftp" 3c = "ssh ftp" 4d = "ssh ftp ssh ftp" 5e = "ssh ftp ftp test ssh ftp" 6pass in proto tcp from any to any port = ssh flags S/SA keep state 7pass in proto tcp from any to any port = ftp flags S/SA keep state 8